Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/47P0GK1vG5pmoypX5pgdsvgW18s.roa
File: 47P0GK1vG5pmoypX5pgdsvgW18s.roa (raw, json)
Hash identifier: ppqIbxsce+vFqjspv9Ib/2HjmZyH282b0xt7cNDThBw=
Subject key identifier: E3:B3:F4:18:AD:6F:1B:9A:66:A3:2A:57:E6:98:1D:B2:F8:16:D7:CB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198261808A05653AFED1ECE37DD22FA107A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/47P0GK1vG5pmoypX5pgdsvgW18s.roa
Signing time: Sun 20 Jul 2025 04:29:25 +0000
ROA not before: Sun 20 Jul 2025 04:29:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138195
IP address blocks: 151.245.152.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:18:08:a0:56:53:af:ed:1e:ce:37:dd:22:fa:10:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 20 04:29:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3b3f418ad6f1b9a66a32a57e6981db2f816d7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b9:ff:bd:d7:ed:23:b6:6c:a2:f8:6a:3e:4f:
76:9d:ab:ca:ff:71:23:4a:f6:49:58:f6:ec:fc:0b:
cb:b8:dd:0c:7a:c6:b0:74:56:d0:6e:80:95:7e:95:
fb:13:c2:64:98:94:24:21:57:31:dc:14:31:5a:21:
d0:4f:87:7c:3b:3b:dc:f7:21:80:61:8a:72:b4:3e:
04:06:90:1e:00:71:e2:ae:cd:e7:3f:67:46:30:74:
32:6a:78:66:88:fb:a4:6f:22:3e:f1:5f:e7:b5:76:
b0:87:54:8c:17:3e:f7:49:b6:a4:53:07:6a:4e:b2:
01:20:e2:2d:5a:9e:10:dc:fd:9d:b6:93:e4:72:d9:
f2:ae:0d:3b:d3:5d:88:56:b4:3c:e4:25:9b:f4:9a:
a8:e4:9e:e6:ea:d6:f7:e4:83:37:a2:39:6e:c3:fc:
72:c6:ff:24:27:1d:4d:98:c4:06:a3:91:0f:d7:32:
dd:e8:f0:d2:14:8d:05:ef:74:de:02:20:40:7c:8e:
a1:7b:90:34:75:1c:2e:95:75:b7:84:0d:61:f1:7a:
5a:39:98:08:29:cb:7b:14:4a:02:d7:54:22:bc:07:
65:a3:63:4d:55:58:08:6f:98:8b:a4:22:c0:c4:9f:
f1:f4:9c:d1:ac:c2:80:d1:7a:a0:40:ea:13:a7:da:
eb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B3:F4:18:AD:6F:1B:9A:66:A3:2A:57:E6:98:1D:B2:F8:16:D7:CB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/47P0GK1vG5pmoypX5pgdsvgW18s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.152.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:c7:0b:ff:7a:b3:88:97:44:59:4a:37:ec:be:10:4f:7c:71:
d0:84:c7:ad:3b:e8:f8:4b:71:24:da:2b:e4:c2:bc:2d:58:0c:
33:03:77:ae:1d:ff:37:c3:5c:7d:f7:1a:13:e3:fc:8e:a2:df:
c7:7c:a5:80:68:1d:91:1f:5b:4c:be:26:50:9b:33:6e:bf:03:
d9:fd:09:88:5e:e8:50:32:1b:33:77:6d:6e:dd:37:df:fd:c6:
5b:1a:4a:61:cf:d1:6a:10:e9:88:c4:75:8c:da:b0:2b:01:3e:
c8:a0:8c:88:4d:0b:fb:a7:4c:21:60:03:a8:d1:d8:ca:0d:e6:
62:d9:81:c1:7f:4d:af:e0:06:61:df:42:e1:45:99:04:52:71:
a8:4b:9b:f5:6c:8c:0c:e0:36:03:a6:95:84:4f:0f:ec:49:d4:
b4:d3:22:8d:e1:c7:3b:ef:07:c4:7d:05:54:c7:31:a0:87:d6:
63:2d:49:b1:e7:79:f6:47:5b:34:e7:9b:b3:8b:94:df:3b:5c:
7d:fb:ec:19:d3:8b:69:44:14:44:77:35:da:33:ab:82:96:cc:
c1:83:f3:e6:d0:b8:29:48:38:4e:e5:31:db:14:75:aa:16:5b:
20:e2:99:50:45:cb:60:98:30:87:22:0e:b4:53:25:00:3b:62:
a2:32:5a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:18:57 2025 by rpki-client